Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TaskSchedulers32' = '%LOCALAPPDATA%\taskschedule.exe'
- %WINDIR%\syswow64\explorer.exe
- %LOCALAPPDATA%\taskschedule.exe
- 'k.##mpy.se':80
- http://k.##mpy.se/ng.php
- DNS ASK k.##mpy.se
- 'localhost':55675
- 'localhost':50894
- '%WINDIR%\syswow64\explorer.exe'